Integrate with Workday

JumpCloud allows importing users from Workday. In the Admin Portal, navigate to Directory Integrations > HR Directories and click Configure under the Workday tile.

Considerations:

• Unique users may only be imported once.
• Data import is one way, Workday to JumpCloud. The process is manual – there is no ongoing data synchronization after the import is complete.
• Changes to users in JumpCloud will not be reflected back to Workday.
• Workday imports only JSON data.

Creating a Workday Integration System User

To create a user

1. In Workday, search “create integration system user” and select the resulting task.
2. Specify a User Name and a strong password.
3. Set the session timeout to a value as low as possible.
4. Select Do Not Allow UI Sessions.
5. Select OK, then Done.

To create a security group

1. In Workday, search “create security group” and select the resulting task.
2. For Type of Tenanted Security Group, select Integration System Security Group (Unconstrained).
3. Specify a name for the group, select OK.
   
4. For Integration System Users, add the user created in the prior step, select OK, then Done.

To assign the group to domain Security Configuration

In Workday, perform steps 1-4 for each Domain/Permission pair in the table that follows:

1. Search “domain security configuration” and select the result.
2. In the Domain field, search the Domain from the table, select the result, select OK.
3. Select the (…) next to the Domain name; under Actions, select Domain > Edit Security Policy Permissions.
   
4. Under Integrated Permissions, add the Security Group created in the above steps and select the Permission.
   
5. Select OK, then Done. If an alert to Activate Pending Security Policy Changes is displayed, do this after all domains have been updated for the security changes to take effect immediately.

Authorizing Workday

1. In the JumpCloud Admin Portal, click Authorize Workday. Provide JumpCloud with the credentials for the Integration System User created in the steps above.
   
2. Click authorize.

Creating a Custom Report

1. Search “create custom report” and select the result.
2. Specify:
   • Report Name
   • For Report Type, choose Advanced.
   • Data Source: This will depend on the manner Workday is organized. All Active Employees is used here, but your data source may vary.
3. Check Enable As Web Service and select OK.
   
4. Edit Custom Report : (* indicates data required for import) Attributes must be mapped in the Columns tab of the custom report, see also the example JSON data below. The Business Object ‘Worker’ is used for the following fields:

5. Share the report with the integration system user​.
   • Select the Share tab, then Share with all authorized groups and users.
     
6. Get the report URL after completing the new report by selecting the (…) next to the report name; under Actions, select Web Service > View URLs.
7. Copy the provided JSON URL and paste into the JumpCloud Workday setting WORKDAY CUSTOM REPORT URL.

Importing Workday Users

Considerations

• Field validation for required data (asterisk indicates the input must be globally unique):
  • username* – Usernames must only contain letters, numbers or _ and cannot start with a number
  • email* – Must be a valid email address
• Importing large numbers of records may take several minutes to complete. Any import more than 500 records will not return results to the console. A workday import notification will be sent when complete and allow for CSV download of import results.

To import users

1. Select Import Workday Users.
   
2. The Workday Import Creation window will present, allowing the selection of users to import and modification to the name, email, and username attributes prior to import. Select the vertical ellipsis to expand and view additional Preview Attributes.
3. Select Import when ready. Import results will be displayed on the subsequent screen.
4. Users will be imported into an inactive state and can be found on the Imported Users tab. They can now be managed in the same manner as any other JumpCloud user.
5. To notify the user of activation, either in the Imported Users tab or the Users Object, the users can be selected, then select the send/resend activation email button.
6. Once the user is activated in JumpCloud, they will no longer display on the Imported Users tab.

Valid JSON example from the Workday custom report: